Privacy Policy - Vitalneck | Data Protection

1. Data Controller Information

The data controller responsible for your personal data is:

Vitalneck
41 Mcclymonts Rd, Maraylya NSW 2765, Australia
Phone: +61 2 4573 6080
Email: reach@vitalneck.world

2. Information We Collect

We collect information that you provide directly to us, including:

Contact Information: Name, email address, phone number when you contact us through our forms
Communication Data: Messages, inquiries, and feedback you send to us
Technical Data: IP address, browser type, device information, and browsing patterns collected through cookies

3. Purpose of Data Processing

We process your personal data for the following purposes:

To respond to your inquiries and provide customer support
To send you information about our activities (with your consent)
To improve our website and user experience
To analyze website traffic and usage patterns
To comply with legal obligations, including the Privacy Act 1988 (Cth) and the Spam Act 2003 (Cth)

We will only use your personal information for direct marketing where we have your express or implied consent, or where the Australian Spam Act 2003 otherwise permits it. You may opt out of marketing communications at any time.

4. Legal Basis for Processing

We collect, hold, use, and disclose your personal information in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). Our legal basis for processing includes:

Consent (APP 3 & APP 6): Where you have provided consent for a specific purpose, such as receiving marketing communications or submitting a contact form
Primary Purpose (APP 3): Collection is reasonably necessary for our functions or activities, such as responding to your enquiries and providing services
Secondary Purpose (APP 6): Where a secondary use is related to the primary purpose, or where you would reasonably expect such use, or as required or authorised by law
Legal Obligation: Where we are required to comply with applicable Australian laws, court orders, or regulatory requirements

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

Contact form submissions: 2 years from the date of submission
Cookie data: As specified in our Cookie Policy
Analytics data: 26 months

After the retention period, your data will be securely deleted or anonymized.

6. Your Rights Under Australian Privacy Law

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), you have the following rights:

Right to Access (APP 12): Request access to the personal information we hold about you, subject to certain exceptions permitted by law
Right to Correction (APP 13): Request correction of any personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading
Right to Anonymity (APP 2): Where practicable, you may interact with us without identifying yourself or using a pseudonym
Right to Complain (APP 1): Lodge a complaint with us or with the Office of the Australian Information Commissioner (OAIC) if you believe we have mishandled your personal information
Right to Withdraw Consent: Withdraw your consent to the collection, use, or disclosure of your personal information at any time (subject to legal or contractual obligations)
Right to Opt Out: Opt out of direct marketing communications at any time using the unsubscribe link or by contacting us directly

To exercise any of these rights, please contact us using the details provided above. We will respond to your request within a reasonable period, usually within 30 days.

7. Data Security and Notifiable Data Breaches

We implement appropriate technical and organisational measures to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure, including:

Secure HTTPS (TLS) encryption for all data transmission
Regular security assessments, vulnerability testing, and software updates
Access controls limiting data access to authorised personnel on a need-to-know basis
Secure data storage with appropriate physical and digital safeguards

Under the Notifiable Data Breaches (NDB) scheme, if we become aware of a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as soon as practicable in accordance with our obligations under the Privacy Act 1988 (Cth).

8. Third-Party Sharing

We do not sell your personal data. We may share your information with:

Service providers who assist in website operations (under strict data processing agreements)
Legal authorities when required by law
Professional advisors for legal, accounting, or consulting purposes

9. International Transfers

We are based in Australia and generally store your personal information within Australia. If we transfer your personal information outside Australia — for example, to cloud service providers — we will take reasonable steps to ensure that the overseas recipient does not breach the Australian Privacy Principles in relation to that information (APP 8), unless an exception applies under the Privacy Act 1988 (Cth).

10. Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, you have the right to lodge a complaint. Please contact us first so we can attempt to resolve the matter directly.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au
Phone: 1300 363 992
Email: enquiries@oaic.gov.au
Mail: GPO Box 5218, Sydney NSW 2001

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: reach@vitalneck.world
Phone: +61 2 4573 6080
Address: 41 Mcclymonts Rd, Maraylya NSW 2765, Australia